Video Game Maker Free Online

Turn three screenshots and a title screen image into 1080p game trailer videos just by typing what you need. Whether it's creating game trailers or promotion...

Security Scan

The skill's stated purpose (make videos from images) matches most of its instructions, but there are a few inconsistencies and privacy/operational concerns (automatic token creation/storage, implicit filesystem probing via install-path detection, and mismatched metadata about config paths) that you should understand before installing.

Purpose & Capability

The skill claims to convert images into trailers and requires a single credential (NEMO_TOKEN), which is proportionate. However the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/) while the registry metadata lists no required config paths — this mismatch is unexplained and suggests the skill expects to read or write a local config directory even though the top-level registry doesn't declare it.

Instruction Scope

Runtime instructions tell the agent to: automatically connect to a remote backend, POST to an anonymous-token endpoint to obtain a token, create sessions, upload user files, stream SSE, and set attribution headers derived from local install paths. Two concerns: (1) the skill instructs automatic token generation and says to 'store' session_id and hide raw API responses/token values from the user — it is unclear where/how tokens/session IDs should be stored and whether the user is informed; (2) building X-Skill-Platform requires probing install paths (~/.clawhub/, ~/.cursor/), meaning the agent will inspect local filesystem paths for attribution headers. These behaviors go beyond simply calling the remote video API and affect local state/privacy.

Install Mechanism

Instruction-only skill with no install steps or code files. No packages or downloads are requested, so there's no installation-time code execution risk.

Credentials

Only one env var (NEMO_TOKEN) is declared as required, which matches the described API usage. However, instructions include generating an anonymous token when NEMO_TOKEN is absent and storing session/token values (location unspecified) and the SKILL.md frontmatter lists a config path (~/.config/nemovideo/). The combination of generating credentials, silently storing them, and filesystem probing is disproportionate unless the skill documents where credentials are saved and how users can revoke them.

Persistence & Privilege

The skill does not request 'always: true' or other elevated persistent privileges. Autonomous invocation is allowed (default) but not combined with other high-risk properties in the manifest. There is no explicit instruction to modify other skills or global agent configs.

Scan Findings in Context

[no_regex_findings] expected: The static regex scanner found no code because this is an instruction-only skill (SKILL.md). That absence is expected, but it means the runtime instructions in SKILL.md are the primary security surface.

What to consider before installing

This skill appears to do what it claims (cloud video rendering) but it will automatically request or create an API token and keep session state. Before installing: 1) Confirm you are comfortable with the skill making outbound requests to mega-api-prod.nemovideo.ai and creating/storing tokens on your machine; ask where tokens/session IDs are saved and how to delete them. 2) Ask the publisher to clarify the config path behavior (does it read/write ~/.config/nemovideo/?) and to make token storage explicit (file path, permissions). 3) If you want tighter privacy, require explicit user consent before generating tokens or probing local install paths for the X-Skill-Platform header.

Getting Started

Got images, text, assets to work with? Send it over and tell me what you need — I'll take care of the AI game video creation.

Try saying:

• "create three screenshots and a title screen image into a 1080p MP4"
• "turn my game screenshots into a trailer with music and transitions"
• "creating game trailers or promotional videos from screenshots and assets for indie game developers"

First-Time Connection

When a user first opens this skill, connect to the processing backend automatically. Briefly let them know (e.g. "Setting up...").

Authentication: Check if NEMO_TOKEN is set in the environment. If it is, skip to step 2.

1. Obtain a free token: Generate a random UUID as client identifier. POST to https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token with header X-Client-Id set to that UUID. The response data.token is your NEMO_TOKEN — 100 free credits, valid 7 days.
2. Create a session: POST to https://mega-api-prod.nemovideo.ai/api/tasks/me/with-session/nemo_agent with Authorization: Bearer <token>, Content-Type: application/json, and body {"task_name":"project","language":"<detected>"}. Store the returned session_id for all subsequent requests.

Keep setup communication brief. Don't display raw API responses or token values to the user.

Video Game Maker Free Online — Create Game Videos From Assets

This tool takes your images, text, assets and runs AI game video creation through a cloud rendering pipeline. You upload, describe what you want, and download the result.

Say you have three screenshots and a title screen image and want to turn my game screenshots into a trailer with music and transitions — the backend processes it in about 1-2 minutes and hands you a 1080p MP4.

Tip: using consistent image sizes speeds up rendering and keeps transitions smooth.

Matching Input to Actions

User prompts referencing video game maker free online, aspect ratio, text overlays, or audio tracks get routed to the corresponding action via keyword and intent classification.

User says...	Action	Skip SSE?
"export" / "导出" / "download" / "send me the video"	→ §3.5 Export	✅
"credits" / "积分" / "balance" / "余额"	→ §3.3 Credits	✅
"status" / "状态" / "show tracks"	→ §3.4 State	✅
"upload" / "上传" / user sends file	→ §3.2 Upload	✅
Everything else (generate, edit, add BGM…)	→ §3.1 SSE	❌

Cloud Render Pipeline Details

Each export job queues on a cloud GPU node that composites video layers, applies platform-spec compression (H.264, up to 1080x1920), and returns a download URL within 30-90 seconds. The session token carries render job IDs, so closing the tab before completion orphans the job.

Base URL: https://mega-api-prod.nemovideo.ai

Endpoint	Method	Purpose
/api/tasks/me/with-session/nemo_agent	POST	Start a new editing session. Body: {"task_name":"project","language":"<lang>"}. Returns session_id.
/run_sse	POST	Send a user message. Body includes app_name, session_id, new_message. Stream response with Accept: text/event-stream. Timeout: 15 min.
/api/upload-video/nemo_agent/me/<sid>	POST	Upload a file (multipart) or URL.
/api/credits/balance/simple	GET	Check remaining credits (available, frozen, total).
/api/state/nemo_agent/me/<sid>/latest	GET	Fetch current timeline state (draft, video_infos, generated_media).
/api/render/proxy/lambda	POST	Start export. Body: {"id":"render_<ts>","sessionId":"<sid>","draft":<json>,"output":{"format":"mp4","quality":"high"}}. Poll status every 30s.

Accepted file types: mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac.

Headers are derived from this file's YAML frontmatter. X-Skill-Source is video-game-maker-free-online, X-Skill-Version comes from the version field, and X-Skill-Platform is detected from the install path (~/.clawhub/ = clawhub, ~/.cursor/skills/ = cursor, otherwise unknown).

Every API call needs Authorization: Bearer <NEMO_TOKEN> plus the three attribution headers above. If any header is missing, exports return 402.

Error Handling

Code	Meaning	Action
0	Success	Continue
1001	Bad/expired token	Re-auth via anonymous-token (tokens expire after 7 days)
1002	Session not found	New session §3.0
2001	No credits	Anonymous: show registration URL with ?bind=<id> (get <id> from create-session or state response when needed). Registered: "Top up credits in your account"
4001	Unsupported file	Show supported formats
4002	File too large	Suggest compress/trim
400	Missing X-Client-Id	Generate Client-Id and retry (see §1)
402	Free plan export blocked	Subscription tier issue, NOT credits. "Register or upgrade your plan to unlock export."
429	Rate limit (1 token/client/7 days)	Retry in 30s once

Reading the SSE Stream

Text events go straight to the user (after GUI translation). Tool calls stay internal. Heartbeats and empty data: lines mean the backend is still working — show "⏳ Still working..." every 2 minutes.

About 30% of edit operations close the stream without any text. When that happens, poll /api/state to confirm the timeline changed, then tell the user what was updated.

Translating GUI Instructions

The backend responds as if there's a visual interface. Map its instructions to API calls:

• "click" or "点击" → execute the action via the relevant endpoint
• "open" or "打开" → query session state to get the data
• "drag/drop" or "拖拽" → send the edit command through SSE
• "preview in timeline" → show a text summary of current tracks
• "Export" or "导出" → run the export workflow

Draft JSON uses short keys: t for tracks, tt for track type (0=video, 1=audio, 7=text), sg for segments, d for duration in ms, m for metadata.

Example timeline summary:

Timeline (3 tracks): 1. Video: city timelapse (0-10s) 2. BGM: Lo-fi (0-10s, 35%) 3. Title: "Urban Dreams" (0-3s)

Tips and Tricks

The backend processes faster when you're specific. Instead of "make it look better", try "turn my game screenshots into a trailer with music and transitions" — concrete instructions get better results.

Max file size is 500MB. Stick to PNG, JPG, MP4, WebM for the smoothest experience.

Export as MP4 for widest compatibility across itch.io, Steam, and YouTube.

Common Workflows

Quick edit: Upload → "turn my game screenshots into a trailer with music and transitions" → Download MP4. Takes 1-2 minutes for a 30-second clip.

Batch style: Upload multiple files in one session. Process them one by one with different instructions. Each gets its own render.

Iterative: Start with a rough cut, preview the result, then refine. The session keeps your timeline state so you can keep tweaking.